Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File: qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier: LtD6QMizUqDd4R9CzAa0kIqwYcGQzrcCo4/yZ23JGnI=
Subject key identifier: 97:B6:5F:C8:2A:73:E2:80:DD:F3:E2:5B:2C:84:39:2E:F1:46:2F:49
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 0196DAE66BD75DD95825C56ED4F5F7858E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number: 1544
Signing time: Fri 16 May 2025 21:00:56 +0000
Manifest this update: Fri 16 May 2025 21:00:56 +0000
Manifest next update: Sat 17 May 2025 21:00:56 +0000
Files and hashes: 1: TOzNLtk2EcFN8tWWUcBYc6SMW8E.roa (hash: q/YjRgOTnjUrtQ6qzvmbEUmVOXxgxmvQW4n5HH9vrjQ=)
2: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: UjvZGGBNhzZvN7PdlaZioTMkzcO1dJS3UeNiTTjNTLk=)
3: wqgIahTiUfpB5-vEurFskts5IVA.roa (hash: XTqqN0VPVFji7V2+PpE1m4lwBVLsT9DZSImWN2tqtPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:e6:6b:d7:5d:d9:58:25:c5:6e:d4:f5:f7:85:8e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: May 16 21:00:56 2025 GMT
Not After : May 17 21:00:56 2025 GMT
Subject: CN=97b65fc82a73e280ddf3e25b2c84392ef1462f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:27:e2:e9:78:fb:6e:f8:c3:b2:93:99:f7:
81:73:78:f0:38:16:ba:09:2a:ba:c6:e8:df:3e:b5:
62:5c:e7:e2:2c:c2:7b:c9:ab:0d:d7:d5:78:5e:28:
46:f3:0b:1a:69:12:c8:1b:7d:d8:db:d6:73:fa:15:
37:61:c8:3f:d5:87:3f:09:77:52:e8:42:56:81:e1:
d6:a2:6a:25:37:4c:5a:3f:85:fe:8a:2b:3f:e3:57:
b5:ea:6e:15:84:2c:56:f4:02:ca:e2:44:95:e4:f2:
0b:ae:bd:75:2b:34:ef:46:c7:b5:61:b9:14:c0:5a:
a1:ba:72:00:a2:11:dc:05:36:be:eb:f5:f6:f5:66:
7a:04:71:b1:0d:5b:98:a3:3e:f4:b2:94:99:5b:ad:
0d:19:94:59:20:af:5b:6b:7e:d3:95:45:32:4d:34:
88:8e:99:33:78:3a:8c:49:d0:de:6c:ac:29:47:4e:
13:7b:23:0b:9d:5a:84:7b:fb:7a:6d:2d:9f:b7:f2:
e3:6e:99:e0:14:e1:ee:d6:e1:cd:f2:16:b2:f7:b0:
57:81:89:b9:6e:b4:f3:b1:d9:84:6e:d6:a5:2c:a4:
da:a8:1d:ff:81:30:5e:96:7f:e0:ff:eb:20:18:91:
f2:7d:04:95:26:f7:ec:bb:af:ac:fa:61:47:8c:99:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:5F:C8:2A:73:E2:80:DD:F3:E2:5B:2C:84:39:2E:F1:46:2F:49
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f1:58:7c:83:ab:71:3c:99:db:6a:3e:54:38:71:e1:28:b8:
56:72:a4:93:0c:c4:a0:9d:37:24:05:c4:c0:b9:63:0e:5e:fb:
40:80:a4:75:80:61:c9:a3:67:08:23:af:87:b3:5d:39:96:68:
d9:7d:3d:cd:a7:9b:1a:a4:50:8e:c0:30:c7:63:93:62:c0:94:
97:2b:33:12:65:31:c2:b3:01:1a:e5:79:63:fa:0a:78:58:5c:
43:13:c3:61:04:89:3b:d0:d1:20:c4:5b:df:4d:49:b6:31:ba:
76:03:bc:ed:44:22:a3:4f:3e:3b:2e:0d:7e:53:f6:b3:c7:81:
98:d2:1c:ea:5a:15:c6:d3:13:b1:16:19:62:3f:42:99:f4:a0:
65:65:2d:92:ed:b7:29:41:2d:37:a7:c3:4e:bc:02:a0:b0:ed:
db:68:e2:71:d1:b7:ef:68:3f:5c:05:e9:02:89:8c:19:09:fb:
ef:bf:dd:08:07:9e:bd:d9:71:2d:bb:2d:36:5e:61:56:cc:3f:
12:45:d4:11:f0:7b:dd:3a:ca:70:8f:8c:fc:22:cd:f9:fc:35:
90:f8:d7:3f:17:40:63:03:93:fe:41:ff:95:1e:69:fd:00:6d:
13:3a:dd:0b:10:47:6a:fa:22:e6:10:b9:1d:ae:8a:d7:f9:e1:
4e:9c:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:25:48 2025 by rpki-client